"Reckhard, Tobias" schrieb:

...

I implemented a telnet proxy by using the portforwarding feature from openssh.

This gives you the advantage that you do not have to forward packets on your firewall and some graet authentication schemes.

The question remains as to whether that's a proxy... It's a circuit-level-gateway and therefore functionally closer to port forwarding than to an actual proxy, IMHO, since the connection isn't actually terminated, but instead, IP packets are simply sent on by the gateway. Feel free to correct me if I'm wrong.

I think so, too. What we actually want to do is forward tn3270 connections and that would not work with openssh - even though I'd like to have encrypted connections with strong authentification ;-) Martin